May 04 2020
01:11 AM
- last edited on
Apr 08 2022
10:25 AM
by
TechCommunityAP
May 04 2020
01:11 AM
- last edited on
Apr 08 2022
10:25 AM
by
TechCommunityAP
Hi all,
I need to know if i configure an analytic rule, with "TimeGenerated <= ago(1d)" inside the query, which time frame does it refer to when it is running?
Thanks !
May 04 2020 06:06 AM
the answer depends on your Log Analytics workspace data retention settings. For example, if you have retention configured for 30 days, then the query results will refer the time range between now-30d and now-1d.
May 04 2020 11:42 AM
You can always test the datetime information returned, one idea (or use arg_min or arg_max):